Supply chain blunder puts 3CX telephone app users at risk Posted 2 years ago by Paul Ducklin Booby-trapped app, apparently signed and shipped by 3CX itself after its source code repository was broken into.